Forum Discussion
MicrosoftAnnouncement: New OneDrive Admin Center Preview
Over the past year, OneDrive has evolved at a rapid pace introducing new features for end users and IT, across sync, web, and mobile. As the number of users and usage continues to grow, our customers have asked for an easier way to administer their company OneDrive settings and policies. Today, we’re excited to announce the rollout of the OneDrive admin center preview to First Release customers and we want to hear your feedback.
Once deployed to your tenant, all tenant and SharePoint admins will have permissions to access the OneDrive admin center preview at https://admin.onedrive.com.
Key features by section include:
- Home: This is the dashboard for the admin center and will soon show recent Office 365 Message Center posts and usage reporting related to OneDrive for Business.
- Sharing: This section helps admins gain control over how and with whom your users are sharing information. This includes controlling the use of external sharing and anonymous links, as well as limiting which external domains users can share with.
- Sync: Admins can block syncing of specific file types and deny syncing to non-domain joined PCs.
- Storage: This section allows admins to easily set default storage limits and document retention durations.
- Device Access: This gives admins control over how and from where a user can access their files. This includes allow/deny access from personal devices or specific networks as well as rich Mobile Application Management Intune policies for iOS and Android.
- Compliance: Admins can find quick links to the Office 365 Security and Compliance Center for key scenarios like auditing, data loss prevention, retention, and eDiscovery.
Please have a look at the preview and provide us your feedback and comments below. Our plan is to begin the generally available rollout later next month and subsequently add a link from the Office 365 admin center.
Thank you!
Stephen Rose
Director, OneDrive Product Marketing
- Hi Cary - here is TechNet article on how to enumerate domain guids.
https://technet.microsoft.com/en-us/library/dn938435.aspx
Why is this on the onedrive.com domain? Our company currently blocks onedrive.com as it is a personal cloud storage site. OD4B is currently hosted on sharepoint.com. Why would Microsoft have an admin tool that is not even in the same domain as the app it is administering?
- Stephen Rose
For many companies (especially smaller ones) OneDrive is a standalone product that is not connected to SharePoint on any level. SharePoint is our product that leads collaboration while OneDrive is the connective tissue between these products including SharePoint, Teams, Yammer, Delve and more.
As we continue to grow OneDrive features and functionality, having OneDrive's ability to be a true standalone product as well as be part of our productivity suite will become even more critical.
I understand your point Stephen Rose, but this will be an issue for Enterprise organizations. I presented on this very topic last night at a local user group and more than one participant mentioned that they are blocking consumer OneDrive URL.
- Good start but a transfer ownership feature would be nice to easily transfer files for users leaving and organization. Posted this same comment on office365.uservoice.com
- Thanks for this :-)...I have already access to the new ODB Admin Center, but the shortcut is not shown yet in the Office 365 admin portal.
- Stephen Rose
Thanks Juan. It may take a day or so. If it's doesn't pop up by Sunday, let me know.
- Stephen Rose I think it's worth sharing this on Office Blogs as it's worth shouting out! I'd like to see this as a dedicated tile in the app launcher too so I can find it easily. Well done, super useful!
- IMHO this should appear in the App Launcher in the same way we don't have in the App Launcher tiles for EXO, SPO, S4B Admin, Azure AD, etc
- Stephen Rose
Agreed. We will soon but we wanted to make sure we got this to you folks as quickly as possible first :)
Looks great, thank you. Is there an upper limit on the document retention period in days under the Storage section?
Also, if a SPO site collection has already been created with external sharing DISABLED in the SPO Admin Center, is that originsl setting honored, or does the default under the new Sharing section for SharePoint sites override the previous value for external sharing?
Tim
- I just set mine to 3650, so you are correct
Few things that are missing IMO:
1) Controls for company-shared links (or simply rename the "sharing" section to "External sharing")
2) Didnt see the RequireAcceptingAccountMatchInvitedAccount exposed, or the BCC for sharing options. Same goes for all other missing settings we have compared to Set-SPOTenant
3) Ability to set default type of sharing to read-only link (or Edit for those that prefer it)
4) More control (custom entry) for the link expiration setttings
5) IP range restrictions should be visible under Sharing as well, or at least make sure that people understand they dont only apply to mobile devices.
Here are eleven OneDrive settings are not yet available in the OneDrive Admin Center (use the SharePoint Admin Center to manage these OneDrive settings)
•External users must accept sharing invites using the same account that the invites were sent to
•custom link expiration dates
•Configuring the OneDrive experience (New or Classic)
•Controlling whether all users or only specific users will get OneDrive sites created when a SharePoint license is assigned
•Notifications (external sharing, or mobile push)
•Show/Hide OneDrive Button
•Script Setting that controls whether or not the ‘Copy to SharePoint’ button will appear in OneDrive
•Ability to enable/disable IRM for OneDrive Globally
•Ability to enable/disable IRM for individual OneDrive Sites
•My Site Cleanup Access Delegation
•My Site Cleanup Secondary Owner
•My Site Secondary Admin
•The following OneDrive settings are still only available in PowerShell and have not yet been surfaced in the SharePoint or OneDrive web admin interfaces:
•Get-SPOTenant | ft ProvisionSharedWithEveryoneFolder
•Get-SPOTenant | ft ShowEveryoneExceptExternalUsersClaim
•Get-SPOTenant | ft ShowEveryoneClaim
•Get-SPOTenant | ft ShowAllUsersClaim
•Get-SPOTenantSyncClientRestriction | ft OptOutOfGrooveBlock
•Get-SPOTenantSyncClientRestriction | ft OptOutOfGrooveSoftBlock
•Get-SPOExternalUser- Stephen Rose
This is great. How would you rank these? In what order?
If you can make it possible, I'd say #1 is the ability to set the default sharing option to read-only links. The rest doesnt really matter as we have them available in PowerShell, though it will be easier for people if they're availble in the ODFB admin portal too.
Are we going to be able to manage individual Onedrive accounts? Like on a per-user basis?
- This is pretty great, bravo!
- Stephen Rose
Thanks Brent! We are super excited to bring this to market.
When I go in to limit which domains can sync it asks "Enter each domain as a GUID on a new line."
Where am I to find my domain's GUID?
Sameer YadavHi Cary - here is TechNet article on how to enumerate domain guids.
https://technet.microsoft.com/en-us/library/dn938435.aspxDoesn't work.
Tried using Administrative Windows Azure Active Directory Module for Windows Powershell. Connected to MSOL and the command Get-AdForest is not recognized.
Peter JohnsonRun get-addomain abd it will return the domain guid
To be complete
Just copy paste this in powershell on your Domain controller
$domains = (Get-ADForest).Domains; foreach($d in $domains) {Get-ADDomain -Identity $d | Select ObjectGuid}Great feature set in this admin portal.
Hi Stephen,
I'd like to now if we can also include AAD domains in the restriction of sycning OneDrive. I have some customers that have remote users in different countries that have AAD joined (Intune Managed) devices. For which I would like to allow OneDrive sync.
Thanks much.
Gr,
Ronald- Stephen Rose
I will have more to share on that next month. Stay tuned :)
